CVE-2025-52938 Information

Jun 26, 2025 cve

Description

Out-of-bounds Read vulnerability in dail8859 NotepadNext (src/lua/src modules). This vulnerability is associated with program files lparser.C.

This issue affects NotepadNext: through v0.11.

The singlevar() in lparser.c lacks a certain luaK_exp2anyregup call leading to a heap-based buffer over-read that might affect a system that compiles untrusted Lua code.

Reference

https://github.com/dail8859/NotepadNext/commit/66b8a97d9fdfd2257996875716f39c18d84e004f https://github.com/dail8859/NotepadNext/pull/756

CNNVD-202506-2950 (Published: 2025-06-23)

Share on: